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What is claimed is: 

1. A method for monitoring a browser's interactions with a server arrangement, comprising 
the steps of: 

(a) captvu-ing information regarding http requests received at the server 
arrangement and corresponding http responses sent from the server 
arrangement, the information including, 

(i) for each request, content of the request and a time of receipt for the 
request, and 

(ii) content of the response corresponding to each such request; 

(b) identifying sessions, each comprising requests received at the server arrangement 
and corresponding responses; 

(c) assigning a session identification (SessionID) for each identified session; and 

(d) recording in a database for each identified session the SessionID for such session 
in association with, 

(i) the content of each respective request in the identified session, 

(ii) the content of each respective response in the identified session, and 

(iii) a chronological order of the requests in the identified session. 



2. A method for monitoring browser interactions with a server arrangement, comprising the 
20 steps of: 

(a) capturing information regarding http requests received from browsers at the 
server arrangement and corresponding http responses sent to the browsers from 
the server arrangement, the information including, 

(i) for each request, 

25 (A) content of the request, 

(B) a time of receipt for the request, and 

(C) a browser identification (BrowserlD) associated with the request, 
and 

(ii) content of the response corresponding to each such request, and 

30 (b) identifying sessions for each BrowserlD, each session comprising requests 

associated with such BrowserlD that are received at the server arrangement 
within a predetermined period of time and corresponding responses; 

(c) assigning a session identification (SessionID) for each identified session; and 

(d) recording in a database for each identified session the SessionID for such session 
35 in association with, 

(i) the content of each respective request in the identified session, 

(ii) the content of each respective response in the identified session, 
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(iii) a chronological order of the requests in the identified session, and 

(iv) the BrowserlD for which the session is identified. 

A method for monitoring browser interactions with a server arrangement for a website, 
comprising the steps of: 

(a) capturing information regarding http requests received from browsers at the 
server arrangement and corresponding http responses sent to the browsers from 
the server arrangement, the information including, 

(i) for each request, 

(A) content of the request, 

(B) a time of receipt for the request, 

(C) a browser identification (BrowserlD) associated with the request, 
and 

(D) an entity identification (EntitylD) associated with a uniform 
resource locator (URL) related to the request, and 

(ii) content of the response corresponding to each such request; 

(b) identifying sessions for each pair of BrowserlD and EntitylD, each session 
comprising, 

(i) requests associated with such BrowserlD and related to the URL 
associated with the EntitylD that are received at the server arrangement 
within a predetermined period of time, and 

(ii) corresponding responses; 

(c) assigning a session identification (SessionID) for each identified session; and 

(d) recording in a database for each identified session the SessionID for such session 
in association with, 

(i) the content of each respective request in the identified session, 

(ii) the content of each respective response in the identified session, 

(iii) a chronological order of the requests in the identified session, and 

(iv) the BrowserlD and EntitylD for which the session is identified. 
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4. The method of claim 1, wherein said step of recording in the database for each identified 
session the chronological order of the requests in the identified session comprises 
recording in the database the time of receipt for each request in the identified session. 

5 5. The method of claim 1, wherein said step of identifying sessions includes identifying, 

(a) requests, each of which is received at the server sirrangement within a 
predetermined period of time of another such request, and 

(b) responses corresponding to such requests. 

10 6. The method of claim 5, ^wherein said step of identifying sessions further includes 
identifying a request as being chronologically the last request of the session if the request 
is for a resource predetermined to signify an end of a session. 

7. The method of claim 1, further comprising the steps of, 

?-"!L5 (a) obtaining a user identification (UserlD) associated with a particulgir request, and 

f (b) recording the UserlD in the database in association with the SessionID of the 
' , = particular request. 

'y 8. The method of claim 7, Wherein the UserlD is obtained from an apphcation server. 

■ £0 9. The method of claim 1, further comprising the steps of, 

(a) obtaining an application session identification (ApplicationSessionID) associated 
^* with a particular request, and 

(b) recording the AppHcationSessionID in the database in association with the 
C . SessionID of the particular request. 

10. The method of claim 9, wherein the ApplicationSessionID is obtained from an apphcation 
server, 

11. The method of claim 1, further comprising, before said step of identifying sessions, first 
30 discarding, 

(a) responses, each of which has a content type matching a predetermined content 
type, and 

(b) each request corresponding to such response. 

35 12. The method of claim 1, further comprising, for each request for a resource predetermined 
to have sensitive input fields, first deleting data fi^Dm such input fields before said step of 
recording the content of the request. 
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The method of claim 1, j/herein the database includes contents of previous responses 
recorded in association with respective hash values therefor, and further comprising the 
steps of, 

(a) calculating a hash value for the content of a current response; and 

(b) when the calculated hash value matches none of the recorded hash values, 
recording the content of the current response in the database and, in association 
therewith, recording the calculated hash value in the database. 

The method of claim 13, wherein said step of recording the SessionID for each identified 
session in association with the content of each respective response in the identified 
session comprises the step of linking the SessionID with the recorded hash value for the 
content of each response in such identified session. 

A computer network for performing the method of claim. 1, comprising: 

(a) a server arrangement disposed for communication with a browser whereat said 
step of capturing is performed; and 

(b) a database whereat said step of recording is performed. 

The computer network of claim 15, -further comprising a firewall in said computer 
network disposed between said server arrangement and said database. 

The computer network of claim 15f wherein said server arrangement comprises a single 
server. 

The computer network of claim 15(, wherein said server arrangement comprises a 

plurality of servers. 

The computer network of claim 18, wherein said step of capturing information is 
performed at each server of said plurality of servers. 

The computer network of claim 19' wherein said computer network further comprises a 
collection component. 

The computer network of claim 20, wherein the method further comprises the steps of, at 
each server of said plurality of servers, 

(a) calculating a hash value for a response captured at that server; 

(b) when the calculated hash value matches one of the reference hash values, 
forwarding from that server to said collection component the calculated hash 
value but not the content of the response; and 
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(c) when the calcvilated hash value matches none of the reference hash values, 
forwarding from that server to said collection component the calculated hash 
value for the content of the response and the content of the response. 

The computer network of claim 20^ wherein said step of identifying sessions is performed 
at said collection component. 

The computer network of claim 20, further comprising a firewall disposed between said 
server arrangement and said collection component. 

The method of claim 1, -further comprising the steps of, 

(a) identifying each request for which a corresponding response is of a content type 
representing part of a chck stream, and 

(b) recording in the database whether a recorded request is so identified. 

The computer network of claim 24, wherein said step of identifying each request for 
which a corresponding response is of a content type representing part of a chck stream is 
performed at the server arrangement. 

The computer network of claim 24, wherein the content type is text/html. 

The computer network of claim 2,4, wherein said step of recording in the database 
whether a response recorded in the database is so identified comprises setting a flag 
maintained in the database in association with the request. 

The method of claim 1, wherein the content of each response is retained within a 
respective record of the database, and wherein said step of recording further comprises 
calculating a hash value for each such database record and then encrypting the 
calcvilated hash value with a private key of a public-private key pair. 

The method of claim 28^' wherein the public-private key pair is for an entity. 

The method of claim 29' wherein the pubUc-private key pair is for a user of a browser to 
which the record pertains. 

The method of claim 1, wherein the content of each request is retained within a 
respective record of the database, and wherein said step of recording further comprises 
calculating a hash value for each such database record and then encrypting the 
calculated hash value with a private key of a public-private key pair. 
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32. The method of claim 3 wherein the public-private key pair is for an entity. 

33. The method of claim 31> wherein the pubHc-private key pair is for a user of a browser to 
5 which the record pertains. 

34. The method of daim 1, wherein each SessionID is retained within a respective record of 
the database, and wherein said step of recording further comprises calculating a hash 
value for each such database record and then encrypting the calculated hash value with a 

10 private key of a public-private key pair. 

35. The method of claim 34, wherein the pubUc-private key pair is for an entity. 

36. The method of daim 34, wherein the pubUc-private key pair is for a user of a browser to 
=-15 which the record pertains. 

37. The method of claim 2, wherein each BrowserlD is retained within a respective record of 
the database, and wherein said step of recording further comprises calculating a hash 

i value for each such database record and then enaypting the calcxilated hash value with a 

' ^0 private key of a pubUc-private key pair. 

38. The method of claim 37, wherein the public-private key pair is for an entity. 

=^ 39. The method of claim 37, wherein the public-private key pair is for a user of a browser to 
s'^SS which the record pertains. 

40. The method of claim 3, wherein each EntitylD is retained within a respective record of 
the database, and wherein said step of recording further comprises calculating a hash 
value for each such database record and then encrjrpting the calculated hash value with a 

30 private key of a public-private key pair. 

41. The method of claim 40, wherein the public-private key pair is for an entity. 

42. The method of claim 40, wherein the pubhc-private key pair is for a user of a browser to 
35 which the record pertains. 

43. A method of creating content of a response enabhng a browser to generate a page from 
information recorded in a database regarding past browser interactions with a server 
arrangement, the browser interactions comprising primary and subordinate http requests 
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received at the server arrangement and corresponding primary and subordinate http 
responses sent from the server arrangement, the information including, 

(i) for each request, content of the request and, in association therewith, content of 
the response corresponding to such request, and 

(ii) a chronological order of the requests received at the server arrangement, 
the method comprising the steps of: 

(a) parsing the content of a primary response recorded in the database to identify 
uniform resource locators (URLs) contained therein, and 

(b) for a URL so identified, locating in the content recorded in the database of 
subordinate requests received at the server arrangement prior to the next 
primary request a URL matching the identified URL, and upon a match, 
replacing the identified URL in the content of the primary response with a 
database pointer directed to the content recorded in the database for the 
subordinate response corresponding to such subordinate request having the 
matching URL. 

A method of creating content of a response enabUng a browser to generate a page from 
information recorded in a database regarding past browser interactions with a server 
arrangement, the browser interactions comprising primary and subordinate http requests 
received at the server arrangement from browsers and corresponding primary and 
subordinate http responses sent from the server arrangement to the browsers, the page 
representative of past browser interactions of a particular browser, the information 
recorded in the database including, 

(i) for each request, content of the request and, in association therewith, content of 
the response corresponding to such request and a browser identification 
(BrowserlD) for the request, the BrowserlD being unique to a browser, 

(ii) a chronological order of the requests received at the server arrangement, 
the method comprising the steps of: 

(a) parsing the content of a primary response recorded in the database to identify 
uniform resource locators (URLs) contained therein, the primary response being 
associated with the BrowserlD of the particular browser; 

(b) for a URL so identified, locating in the content recorded in the database of 
subordinate requests received at the server arrangement prior to the next 
primary request a URL matching the identified URL, and upon a match, 
replacing the identified URL in the content of the primary response with a 
database pointer directed to the content recorded in the database for the 
subordinate response corresponding to such subordinate request having the 
matching URL. 
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The method of claim 44; wherein the database further includes recorded therein, in 
association with each request, a session identification (SessionID) for a session in which 
the request was received at the server arrangement, each SessionID being unique to a 



46. The method of claim 45,'^wherein the page further represents past browser interactions of 
the particTilar browser in a particular session, and the primary response for which the 
content is parsed is associated with the SessionID of the particular session. 

10 47. The method of claim 44, wherein the database further includes recorded therein, in 
association with each request, an entity identification (EntitylD) on whose behalf the 
corresponding response is made, each EntitylD being unique to an entity. 

48. The method of claim 47, wherein the page further represents past browser interactions of 
15 the particular browser with regard to a particular entity, and the primary response for 

which the content is parsed is associated with the EntitylD of the particular entity. 

.| 49. The method of claim 44, wherein the database further includes recorded therein, in 
0 association with each request, an appHcatLon session identification 

i^£0 (ApphcationSessionID) for an apphcation session, each ApphcationSessionID being 

imique to an apphcation session. 

50. The method of claim 49, wherein the page further represents past browser interactions of 
the particular browser in a particular apphcation session, and the primary response for 

^25 which the content is parsed is associated with the ApphcationSessionID of the particxilar 

application session. 

51. The method of claim 44, wherein the database further includes recorded therein, in 
association with each request, a user identification (UserlD) for a user of the particular 

30 browser, each UserlD being unique to a user. 

52. The method of claim 51, wherein the page further represents past browser interactions of 
the particular browser by a particular user, and the primary response for which the 
content is parsed is associated with the UserlD of the particular user. 

35 

53. The method of claim 43, further comprising the step of modifying the content of the 
parsed primary response to deactivate hypertext that woiild otherwise be included in the 
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The method o£ claim 4a, further comprising the step of identifying a form source URL in 
the content of the parsed primary response and a matching target source URL in the 
content of a subsequent request recorded in the database, and associating the response 
content with the request content. 

The method of claim 43, further comprising the step of identifying a form source URL in 
the content of the parsed primary response and a matching target source URL in the 
content of a subsequent request recorded in the database, and modifying the content of 
the response to include data from the content of the request such that the page generated 
by the browser comprises a form-fUled page. 

The method of claim 55', wherein the page comprises a complete form-filled page. 

The method of claim 43,;wherein the parsed primary response includes a content type of 
text/html. 

The method of claim 43, wherein the content of each response is retained within a 
respective record of the database together with a digital signatiu-e for such record, and 
further comprising the step of verifying the record with a pubUc key of a pubUc-private 
key pair. 

The method of claim 58,''wherein the pubUc-private key pair is for an entity. 

The method of claim 58", wherein the pubhc-private key pair is for a user of a browser to 
which the record pertains. 

The method of claim 43, wherein the content of each request is retained within a 
respective record of the database together with a digital signature for such record, and 
further comprising the step of verifying the record with a pubhc key of a public-private 
key pair. 

The method of claim 61, wherein the public-private key pair is for an entity. 

The method of claim 61, wherein the public-private key pan- is for a user of a browser to 
which the record pertains. 

The method of claim 44, wherein each BrowserlD is retained within a respective record of 
the database together with a digital signature for such record, and further comprising the 
step of verifying the record with a public key of a pubhc-private key pair. 
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The method of claim 64, wherein the pubUc-private key pair is for an entity. 

The method of claim 64', wherein the public-private key pair is for a user of a browser to 
which the record pertains. 

The method of claim 45,' wherein each SessionID is retained within a respective record of 
the database together with a digital signature for such record, and further comprising the 
step of verifying the record with a public key of a pubhc-private key pair. 

The method of claim 67, wherein the pubhc-private key pair is for an entity. 

The method of claim 67, wherein the public-private key pair is for a user of a browser to 
which the record pertains. 

The method of claim 47,' wherein each EntitylD is retained within a respective record of 
the database together with a digital signature for such record, and further comprising the 
step of verifying the record with a public key of a pubhc-private key pair. 

The method of claim 70, wherein the pubhc-private key pair is for the entity of the 
EntitylD. 

The method of claim 70, wherein the public-private key pair is for a user of a browser to 
which the record pertains. 

The method of claim 419, wherein each AppHcationSessionlD is retained within a 
respective record of the database together with a digital signature for such record, and 
further comprising the step of verifying the record with a pubhc key of a pubhc-private 
key pair. 

The method of claim 73,' wherein the public-private key pair is for an entity. 

The method of claim 73,wherein the pubhc-private key pair is for a user of a browser to 
which the record pertains. 

The method of claim 49, wherein each UserlD is retained within a respective record of 
the database together with a digital signature for such record, and further comprising the 
step of verifying the record with a pubUc key of a public-private key pair. 
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The method of claim 76, wherein the pubhc-private key pair is for an entity. 

The method of claim 76; wherein the public-private key pair is for the user of the UserlD. 

A method of viewing a page representative of past browser interactions of a particular 
browser with a server arrangement, comprising the steps of: 

(I) monitoring browser interactions of a plurality of browsers, including the 
particular browser, with the server arrangement, including, 

(a) capturing information regarding primary and subordinate http requests 
received from the browsers at the server arrangement and corresponding 
primary and subordinate http responses sent to the browsers from the 
server arrangement, the information including, 

(i) for each request, 

(A) content of the request, 

(B) a time of receipt for the request, and 

(C) a browser identification (BrowserlD) associated with the 
request, the BrowserlD being unique to each browser, and 

(ii) content of the response corresponding to each such request, and 

(b) identifying sessions for each BrowserlD, each session comprising requests 
associated with such BrowserlD that are received at the server 
arrangement within a predetermined period of time and corresponding 
responses; 

(c) assigning a session identification (SessionID) for each identified session; 
and 

(d) recording in a database for each identified session the SessionID for such 
session in association with, 

(i) the content of each respective request in the identified session, 

(ii) the content of each respective response in the identified session, 

(iii) a chronological order of the requests in the identified session, and 

(iv) the BrowserlD for which the session is identified; 

(II) creating content of a response, including, 

(a) parsing the content of a primary response recorded in the database to 
identify uniform resource locators (URLs) contained therein, the primary 
response being associated with the BrowserlD of the particular browser; 
and 

(b) for a URL so identified, locating in the content recorded in the database of 
subordinate requests received at the server arrangement prior to the next 
primary request a URL matching the identified URL, and upon a match, 
replacing the identified URL in the content of the primary response with 
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a database pointer directed to the content recorded in the database for the 
subordinate response corresponding to such subordinate request having 
the matching URL; and 
(III) sending the created content of the response to a reviewing browser for generation 
of the page. 

The method of claim 19, further comprising originating a digital signature at the 
reviewing browser for the page viewed. 

The method of daim 80,' wherein the digital signature is originated using a private key of 
a public-private key pair of a user of the reviewing browser. 

A method of rendering assistance by a customer service representative (CSR) to a user of 
a particular browser interacting with a web server arrangement, comprising the steps of, 
(I) monitoring browser interactions of a pluraHty of browsers, including the 
particular browser, with the server arrangement, including, 

(a) capturing information regarding primary and subordinate http requests 
received from the browsers at the server arrangement and corresponding 
primary and subordinate http responses sent to the browsers from the 
server arrangement, the information including, 

(i) for each request, 

(A) content of the request, 

(B) a time of receipt for the request, and 

(C) a browser identification (BrowserlD) associated with the 
request, the BrowserlD being unique to each browser, and 

(ii) content of the response corresponding to each such request, and 

(b) identifying sessions for each BrowserlD, each session comprising requests 
associated with such BrowserlD that are received at the server 
arrangement within a predetermined period of time and corresponding 
responses; 

(c) assigning a session identification (SessionID) for each identified session; 
and 

(d) recording in a database for each identified session the SessionID for such 

session in association with, 

(i) the content of each respective request in the identified session, 

(ii) the content of each respective response in the identified session, 

(iii) a chronological order of the requests in the identified session, and 

(iv) the BrowserlD for which the session is identified; 
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(II) viewing by the CSR on a CSR browser a page representative of past browser 
interactions of the particular browser of the user with the server arrangement, 
comprising the steps of: 

(a) creating content of a response, including, 
5 (i) parsing the content of a primary response recorded in the 

database to identify uniform resource locators (URLs) contained 
therein, the primary response being associated with the 
BrowserlD of the particular browser; and 
(ii) for a URL so identified, locating in the content recorded in the 
10 database of subordinate requests received at the server 

arrangement prior to the next primary request a URL matching 
the identified URL, and upon a match, replacing the identified 
URL in the content of the primary response with a database 
pointer directed to the content recorded in the database for the 



-15 subordinate response corresponding to such subordinate request 

I having the matching URL; and 

(b) displaying the page on the CSR browser upon receipt by the CSR browser 
l2 of a response having the created content; and 

(III) providing guidance by the CSR to the user based on the viewing of the page by 
° ^0 the CSR. 

83. The method of claim 82, wherein the guidance is provided by the CSR in near real time. 

84. The method of claim 82; wherein the guidance is provided by the CSR offline. 

85. The method of claim 82, wherein the guidance is provided by the CSR via telephone. 

86. The method of claim 82, wherein the guidance is provided by the CSR via email. 

30 87. The method of claim 82, wherein guidance is provided by the CSR via Internet chat. 

88. The method of claim 79, further comprising the steps of, 

(a) obtaining a user identification (UserlD) associated with a particular request, and 

(b) recording the UserlD in the database in association with the SessionID of the 
35 particular request. 

89. The method of claim 88, wherein the UserlD is obtained from an application server. 

90. The method of claim 79, further comprising the steps of. 
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(a) obtaining an application session identification (ApplicationSessionID) associated 
with a particular request, and 

(b) recording the ApplicationSessionID in the database in association with the 
SessionID of the particular request. 

The method of claim 90, wherein the ApphcationSessionID is obtained from an 
apphcation server. 

The method of claim 79', further comprising, before said step of identifying sessions, first 
discarding, 

(a) responses, each of which has a content type matching a predetermined content 
type, and 

(b) each request corresponding to such response. 

The method of claim 79, further comprising, for each request for a resource 
predetermined to have sensitive input fields, first deleting data from such input fields 
before said step of recording the content of the request. 

The method of claim 79,* wherein the database includes contents of previous responses 
recorded in association with respective hash values therefor, and further comprising the 

steps of, 

(a) calculating a hash value for the content of a current response; and 

(b) when the calculated hash value matches none of the recorded hash values, 
recording the content of the current response in the database and, in association 
therewith, recording the calculated hash value in the database. 

A computer network for performing said step of monitoring of claim 79, comprising: 

(a) a server arrangement disposed for communication with a browser whereat said 
step of capturing is performed; 

(b) a database whereat said step of recording is performed; and 

(c) a firewall disposed between said server arrangement and said database. 

The computer network of claim 95, wherein said server arrangement comprises a single 

server. 

The computer network of claim 95, wherein said server arrangement comprises a 
pluraUty of servers. 
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The computer network of claim 97, wherein said step of captiiring information is 
performed at each server of said plvirality of servers. 



The computer network of claim 98^ wherein said computer network further comprises a 
collection component. 

The computer network of claim 99, wherein the method further comprises the steps of, at 
each server of said plurality of servers, 

(a) calculating a hash value for a response captured at that server; 

(b) when the calculated hash value matches one of the reference hash values, 
forwarding from that server to said collection component the calculated hash 
value but not the content of the response; and 

(c) when the calculated hash value matches none of the reference hash values, 
forwarding from that server to said collection component the calculated hash 
value for the content of the response and the content of the response. 

The computer network of claim 99, wherein said step of identifying sessions is performed 
at said collection component. 

The computer network of claim 99, further comprising a firewall disposed between said 
server arrangement and said collection component. 

The method of claim 79, wherein the page further represents past browser interactions of 
the particular browser in a particular session, and the primary response for which the 
content is parsed is associated with the SessionID of the particular session. 



The method of claim 79, wherein the web server arrangement services web sites of a 
plurality of entities and wherein the database fiarther includes recorded therein, in 
association with each request, an entity identification (EntitylD) unique to each entity. 

The method of claim 104, wherein the page further represents past browser interactions 
of the particular browser with regard to a particular entity, and the primary response for 
which the content is parsed is associated with the EntitylD of the particular entity. 

The method of claim 79, wherein the database further includes recorded therein, in 
association with each request, an application session identification 
(ApplicationSessionID) for an application session, each AppHcationSessionID being 
unique to an application session. 
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107. The method of daim 106, wherein the page further represents past browser interactions 
of the particular browser in a particular apphcation session, and the primary response for 
which the content is parsed is associated with the ApphcationSessionID of the particular 
application session. 

5 

108. The method of claim 79, wherein the database further includes recorded therein, in 
association with each request, a user identification (UserlD) for a user of the particular 
browser, each UserlD being unique to a user. 

10 109. The method of claim 108, 'wherein the page further represents past browser interactions 
of the particular browser by a particular user, and the primary response for which the 
content is parsed is associated with the UserlD of the particular user. 

110. The method of claim 79, further comprising the step of modifying the content of the 
= 15 parsed primary response to deactivate hypertext that would otherwise be included in the 

page. 

111. The method of claim 110", further comprising the step of identifying a form source URL in 
the content of the parsed primary response and a matching target source URL in the 

^0 content of a subsequent request recorded in the database, and associating the response 

content with the request content. 

=i 112. The method of claim 79, further comprising the step of identifying a form source URL in 
fj the content of the parsed primary response and a matching target source URL in the 

content of a subsequent request recorded in the database, and modifying the content of 
the response to include data from the content of the request such that the page generated 
by the browser comprises a form-filled page. 

113. The method of claim 112, wherein the page comprises a complete form-filled page. 

30 

114. The method of claim 79» wherein the parsed primary response includes a content type of 
text/html. 



A method for monitoring a browser's interactions with a server arrangement, comprising 
the steps of: 
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(a) capturing information regarding primary and subordinate http requests received 
at the server arrangement and corresponding primary and subordinate http 
responses sent from the server arrangement, the information including, 

(i) for each request, content of the request, and 
5 (ii) content of the response corresponding to each such request; 

(b) recording in a database, 

(i) the content of each respective request, 

(ii) the content of each respective response, and 
(ui) a chronological order of the requests; 

10 (c) parsing the content of primary requests recorded in the database to identify 

uniform resource locators (URLs) contained therein; and 
(d) taking a predefined action in response to the recognition of a predetermined 
pattern of identified URLs contained with the content of the primary requests. 

15 116. A method for monitoring a browser's interactions with a server arrangement, comprising 
the steps of: 

(a) capturing information regarding primary and subordinate http requests received 
at the server arrangement and corresponding primary and subordinate http 

==- responses sent from the server arrangement, the information including, 

20 (i) for each request, content of the request and a time of receipt for the 

^ request, and 

(ii) content of the response corresponding to each such request; and 

(b) identifying sessions, each comprising requests received at the server arrangement 
and corresponding responses; 

r=25 (c) assigning a session identification (SessionID) for each identified session; 

(d) recording in a database for each identified session the SessionID for such session 
in association with, 

(i) the content of each respective request in the identified session, 

(ii) the content of each respective response in the identified session, and 
30 (iii) a chronological order of the requests in the identified session; and 

(e) for a particular SessionID, parsing the content of primary requests recorded in 
the database in association with such SessionID to identify uniform resource 
locators (URLs) contained therein, and 

(f) taking a predefined action in response to the recognition of a predetermined 
35 pattern of identified URLs contained with the content of the primary requests. 

117. A method for monitoring a browser's interactions with a server arrangement, comprising 
the steps of: 



62/65 



(a) capturing information regarding primary and subordinate http requests received 
at the server arrangement and corresponding primary and subordinate http 
responses sent from the server arrangement, the information including, 

(i) for each request, 

5 (A) content of the request, 

(B) a time of receipt for the request, and 

(C) a browser identification (BrowserlD) associated with the request, 
and 

(ii) content of the response corresponding to each such request; 

10 (b) identifying sessions for each BrowserlD, each comprising requests associated 

with such BrowserlD that are received at the server arrangement within a 
predetermined period of time and corresponding responses; 

(c) assigning a session identification (SessionID) for each identified session; 

(d) recording in a database for each identified session the SessionID for such session 
15 in association with, 

: (i) the content of each respective request in the identified session, 

(ii) the content of each respective response in the identified session, 

: (iii) a chronological order of the requests in the identified session, and 

(iv) the BrowserlD for which the session is identified; 

-20 (e) for a particular BrowserlD, parsing the content of primary requests recorded in 

. the database in association with such BrowserlD to identify uniform resoiirce 

' locators (URLs) contained therein; and 

: (f) taking a predefined action in response to the recognition of a predetermined 

pattern of identified URLs contained with the content of the primary requests. 

^5 

118. The method of claim 116," wherein the predefined pattern comprises a chronological 
sequence of URLs. 

119. The method of claim 116, wherein the predetermined action comprises notifying a 
30 customer service representative of the recognition of the predetermined pattern. 

120. The method of claimll6,, wherein the predetermined action comprises assigning a pattern 
identification (PatternID) corresponding to the URL pattern recognized and recording the 
PatternID in the database. 

35 

121. A computer network for performing the method of claim 116, comprising: 

(a) a server arrangement disposed for communication with a browser whereat said 
step of capturing is performed; and 

(b) a database whereat said step of recording is performed. 
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122. The computer network of claim 121, further comprising a firewall in said computer 
network disposed between said server arrangement and said database. 

5 123. The computer network of claim 122, wherein said server arrangement comprises a single 
server. 

124. The computer network of claim 122, wherein said server arrangement comprises a 
plurahty of servers. 

10 

125. The computer network of claim 124, wherein said step of capturing information is 
performed at each server of said plurality of servers. 

126. The computer network of claim 125, wherein said computer network further comprises a 
= 15 collection component whereat said step of identifying sessions is performed. 

127. The computer network of claim 126, further comprising a firewall disposed between said 
server arrangement and said collection component. 

""So 128. Computer-readable medium having computer-executable instructions that perform the 
steps of the method of claim 1. 
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What is claimed is: 

1. A method for monitoring a browser's interactions with a server arrangement, comprising 
the steps of: 

(a) captxiring information regarding http requests received at the server 
5 arrangement and corresponding http responses sent from the server o 

arrangement, the information including, *cm 

.V£> 

(i) for each request, content of the request and a time of receipt for the «»c5 
request, and 

(ii) content ofthe response corresponding to each such request; •g'^ 
10 (b) identifying sessions, each comprising requests received at the server arrangement 

and corresponding responses; 

(c) assigning a session identification (SessionID) for each identified session; and 

(d) recording in a database for each identified session the SessionID for such session 
in association with, 

15 (i) the content of each respective request in the identified session, 

(ii) the content of each respective response in the identified session, and 
^ (iii) a chronological order of the requests in the identified session. 

m 2. A method for monitoring browser interactions with a server arrangement, comprising the 

20 steps of: 

|__^ (a) capturing information regarding http requests received from browsers at the 

f server arrangement and corresponding http responses sent to the browsers from 

the server arrangement, the information including, 

(i) for each request, 

25 (A) content of the request, 

(B) a time of receipt for the request, and 

(C) a browser identification (BrowserlD) associated with the request, 
and 

(ii) content of the response corresponding to each such request, and 

30 (b) identifying sessions for each BrowserlD, each session comprising requests 

associated with such BrowserlD that are received at the server arrangement 
within a predetermined period of time and corresponding responses; 

(c) assigning a session identification (SessionID) for each identified session; and 

(d) recording in a database for each identified session the SessionID for such session 
35 in association with, 

(i) the content of each respective request in the identified session, 

(ii) the content of each respective response in the identified session, 
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(iii) a chronological order of the requests in the identified session, and 

(iv) the BrowserlD for which the session is identified. 

A method for monitoring browser interactions with a server arrangement for a website, 
comprising the steps of: 

(a) capturing information regarding http requests received from browsers at the 
server arrangement and corresponding http responses sent to the browsers from 
the server arrangement, the information including, 

(i) for each request, 

(A) content of the request, 

(B) a time of receipt for the request, 

(C) a browser identification (BrowserlD) associated with the request, 
and 

(D) an entity identification (EntitylD) associated with a uniform 
resource locator (URL) related to the request, and 

(ii) content of the response corresponding to each such request; 

(b) identifying sessions for each pair of BrowserlD and EntitylD, each session 
comprising, 

(i) requests associated with such BrowserlD and related to the URL 
associated with the EntitylD that are received at the server arrangement 
within a predetermined period of time, and 

(ii) corresponding responses; 

(c) assigning a session identification (SessionID) for each identified session; and 

(d) recording in a database for each identified session the SessionID for such session 
in association with, 

(i) the content of each respective request in the identified session, 

(ii) the content of each respective response in the identified session, 
(ui) a chronological order of the requests in the identified session, and 
(iv) the BrowserlD and EntitylD for which the session is identified. 
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The method of claims 1 , 2, or 3 , wherein said step of recording in the database for each 
identified session the chronological order of the requests in the identified session 
comprises recording in the database the time of receipt for each request in the identified 
session. 

The method of claims 1 , 2, or 3 , wherein said step of identifjdng sessions includes 
identifying, 

(a) requests, each of which is received at the server arrangement within a 
predetermined period of time of another such request, and 

(b) responses corresponding to such requests. 

The method of claim 5, wherein said step of identifying sessions further includes 
identifying a request as being chronologically the last request of the session if the request 
is for a resource predetermined to signify an end of a session. 

The method of claims 1 , 2, or 3 , further comprising the steps of, 

(a) obtaining a user identification (UserlD) associated with a particular request, and 

(b) recording the UserlD in the database in association with the SessionID of the 
particular request. 

The method of claim 7, wherein the UserlD is obtained from an apphcation server. 
The method of claims 1 , 2, or 3 , further comprising the steps of, 

(a) obtaining an application session identification (ApphcatLonSessionlD) associated 
with a particular request, and 

(b) recording the ApphcationSessionID in the database in association with the 
SessionID of the particular request. 

The method of claim 9, wherein the ApphcationSessionID is obtained from an application 
server. 

The method of claims 1 , 2, or 3 , further comprising, before said step of identifying 
sessions, first discarding, 

(a) responses, each of which has a content type matching a predetermined content 
type, and 

(b) each request corresponding to such response. 

The method of claims 1- 2, o r 3 , further comprising, for each request for a resource 
predetermined to have sensitive input fields, first deleting data from such input fields 
before said step of recording the content of the request. 
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The method of claims 1 , 2, or 3 , wherein the database includes contents of previous 
responses recorded in association with respective hash values therefor, and further 
comprising the steps of, 

(a) calculating a hash value for the content of a current response; and 

(b) when the calculated hash value matches none of the recorded hash values, 
recording the content of the current response in the database and, in association 
therewith, recording the calculated hash value in the database. 

The method of claim 13, wherein said step of recording the SessionID for each identified 
session in association with the content of each respective response in the identified 
session comprises the step of Unking the SessionID with the recorded hash value for the 
content of each response in such identified session. 

A computer network for performing the method of claims 1 , 2, or 3 , comprising: 

(a) a server arrangement disposed for commvmication with a browser whereat said 
step of capturing is performed; and 

(b) a database whereat said step of recording is performed. 

The computer network of claim 15, further comprising a firewall in said computer 
network disposed between said server arrangement and said database. 

The computer network of claim 15, wherein said server arrangement comprises a single 
server. 

The computer network of claim 15, wherein said server arrangement comprises a 
plurality of servers. 

The computer network of claim 18, wherein said step of capturing information is 
performed at each server of said plvirality of servers. 

The computer network of claim 19, wherein said computer network further comprises a 
collection component. 

The computer network of claim 20, wherein the method further comprises the steps of, at 
each server of said plurality of servers, 

(a) calculating a hash value for a response captured at that server; 
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(b) when the calculated hash value matches one of the reference hash values, 
forwarding from that server to said collection component the calculated hash 
value but not the content of the response; and 

(c) when the calculated hash value matches none of the reference hash values, 
5 forwarding from that server to said collection component the calculated hash 

value for the content of the response and the content of the response. 

22. The computer network of claim 20, wherein said step of identifying sessions is performed 
at said collection component. 

10 

23. The computer network of claim 20, further comprising a firewall disposed between said 
server arrangement and said collection component. 

24. The method of claim© 1 . 2, or 3 , further comprising the steps of, 

15 (a) identifying each request for which a corresponding response is of a content type 

representing part of a dick stream, and 
j (b) recording in the database whether a recorded request is so identified. 

r~\ 25. The computer network of claim 24, wherein said step of identifying each request for 

Z 20 which a corresponding response is of a content type representing part of a chck stream is 

^ performed at the server arrangement. 



26. The computer network of claim 24, wherein the content type is text/html. 

27. The computer network of claim 24, wherein said step of recording in the database 
whether a response recorded in the database is so identified comprises setting a flag 
maintained in the database in association with the request. 

28. The method of clsiime 1 ; 2. or 3 , wherein the content of each response is retained within a 
respective record of the database, and wherein said step of recording further comprises 
calculating a hash value for each such database record and then encrypting the 
calculated hash value with a private key of a public-private key pair. 

29. The method of claim 28, whereia the public-private key pair is for an entity. 

30. The method of claim 29, wherein the public-private key pair is for a user of a browser to 
which the record pertains. 
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31. The method of claims 1 , 2. or 3 , wherein the content of each request is retained within a 
respective record of the database, and wherein said step of recording further comprises 
calculating a hash value for each such database record and then encrypting the 
calculated hash value with a private key of a public-private key pair. 

32. The method of claim 31, wherein the public-private key pair is for an entity. 

33. The method of claim 31, wherein the pubHc-private key pair is for a user of a browser to 
which the record pertains. 

34. The method of claims 1 , 2, or 3 , wherein each SessionID is retained within a respective 
record of the database, and wherein said step of recording further comprises calculating a 
hash value for each such database record and then encrypting the calculated hash value 
with a private key of a pubHc-private key psdr. 

35. The method of claim 34, wherein the pubHc-private key pair is for an entity. 

36. The method of claim 34, wherein the public-private key parr is for a user of a browser to 
which the record pertains. 

37. The method of claims 2 , or 3 , wherein each BrowserlD is retained within a respective 
record of the database, and wherein said step of recording further comprises calculating a 
hash value for each such database record and then encrypting the calculated hash value 
with a private key of a public-private key pair. 

38. The method of claim 37, wherein the public-private key pair is for an entity. 

39. The method of claim 37, wherein the public-private key pair is for a user of a browser to 
which the record pertains. 

40. The method of claim 3, wherein each EntitylD is retained within a respective record of 
the database, and wherein said step of recording further comprises calculating a hash 
V£due for each such database record and then encrypting the calculated hash value with a 
private key of a public-private key pair. 

41. The method of claim 40, wherein the public- private key pair is for an entity. 

42. The method of claim 40,_wherein the public-private key pair is for a user of a browser to 
which the record pertains. 
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A method of creating content of a response enabling a browser to generate a page from 
information recorded in a database regarding past browser interactions with a server 
arrangement, the browser interactions comprising primary and subordinate http requests 
received at the server arrangement and corresponding primary and subordinate http 
responses sent from the server arrangement, the information including, 

(i) for each request, content of the request and, in association therewith, content of 
the response corresponding to such request, and 

(ii) a chronological order of the requests received at the server arrangement, 
the method comprising the steps of: 

(a) parsing the content of a "primary response recorded in the database to identify 
uniform resource locators (URLs) contained therein, and 

(b) for a URL so identified, locating in the content recorded in the database of 
subordinate requests received at the server arrangement prior to the next 
primary request a URL matching the identified URL, and upon a match, 
replacing the identified URL in the content of the primary response with a 
database pointer directed to the content recorded in the database for the 
subordinate response corresponding to such subordinate request having the 
matching URL. 

A method of creating content of a response enabUng a browser to generate a page from 
information recorded in a database regarding past browser interactions with a server 
arrangement, the browser interactions comprising primary and subordinate http requests 
received at the server arrangement from browsers and corresponding primary and 
subordinate http responses sent from the server arrangement to the browsers, the page 
representative of past browser interactions of a particular browser, the information 
recorded in the database including, 

(i) for each request, content of the request and, in association therewith, content of 
the response corresponding to such request and a browser identification 
(BrowserlD) for the request, the BrowserlD being unique to a browser, 

(ii) a chronological order of the requests received at the server arrangement, 
the method comprising the steps of: 

(a) parsing the content of a primary response recorded in the database to identify 
uniform resource locators (URLs) contained therein, the primary response being 
associated with the BrowserlD of the particular browser; 

(b) for a URL so identified, locating in the content recorded in the database of 
subordinate requests received at the server arrangement prior to the next 
primary request a URL matching the identified URL, and upon a match, 
replacing the identified URL in the content of the primary response with a 
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database pointer directed to the content recorded in the database for the 
subordinate response corresponding to such subordinate request having the 
matching URL. 

5 45. The method of claim 44, wherein the database further includes recorded therein, in 
association with each request, a session identification (SessionID) for a session in which 
the request was received at the server arrangement, each SessionID being unique to a 
session. 



The method of claim 45, wherein the page further represents past browser interactions of 
the particular browser in a particiilar session, and the primary response for which the 
content is parsed is associated with the SessionID of the particular session. 

The method of claim 44, wherein the database further includes recorded therein, in 
association with each request, an entity identification (EntitylD) on whose behalf the 
corresponding response is made, each EntitylD being unique to an entity. 

The method of claim 47, wherein the page further represents past browser interactions of 
the particular browser with regard to a particular entity, and the primary response for 
which the content is parsed is associated with the EntitylD of the particular entity. 

The method of claim 44, wherein the database further includes recorded therein, in 
association with each request, an application session identification 
(ApphcationSessionID) for an appUcation session, each ApplicationSessionID being 
unique to an apphcation session. 

The method of claim 49, wherein the page further represents past browser interactions of 
the particular browser in a particular application session, and the primary response for 
which the content is parsed is associated with the ApphcationSessionID of the particular 

appUcation session. 

The method of claim 44, wherein the database further includes recorded therein, in 
association with each request, a user identification (UserlD) for a user of the particular 
browser, each UserlD being unique to a user. 

The method of claim 51, wherein the page further represents past browser interactions of 
the particular browser by a particular user, and the primary response for which the 
content is parsed is associated with the UserlD of the partictdar user. 
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53. 



The method of claims 43 or 44 , further comprising the step of modifying the content of the 
parsed primary response to deactivate hypertext that would otherwise be included in the 
page. 



54. The method of claims 43 or 41 , further comprising the step of identifying a form source 
URL in the content of the parsed primary response and a matching target source URL in 
the content of a subsequent request recorded in the database, and associating the 
response content with the request content. 

55. The method of claims 43 or 44 , further comprising the step of identifying a form scirrce 
URL in the content of the parsed primary response and a matching target so\arce URL in 
the content of a subsequent request recorded in the database, and modifying the content 
of the response to include data from the content of the request such that the page 
generated by the browser comprises a form-fOled page. 

56. The method of claim 55, wherein the page comprises a complete form-filled page. 

57. The method of claims 43 or 44 , wherein the parsed primary response includes a content 
type of text/html. 

58. The method of claims 43 or 44 , wherein the content of each response is retained within a 
respective record of the database together with a digital signature for such record, and 
further comprising the step of verifying the record with a public key of a public-private 
key pair. 

59. The method of claim 58, wherein the public-private key pair is for an entity. 

60. The method of claim 58, wherein the pubhc-private key pair is for a user of a browser to 
which the record pertains. 

61. The method of claims 43 or 41, wherein the content of each request is retained within a 
respective record of the database together with a digital signature for such record, and 
further comprising the step of verifying the record with a public key of a pubhc-private 
key pair. 

62. The method of claim 61, wherein the public-private key pair is for an entity. 

63. The method of claim 61, wherein the pubUc-private key pair is for a user of a browser to 
which the record pertains. 
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The method of claim 44, wherein each BrowserlD is retained within a respective record of 
the database together with a digital signature for such record, and further comprising the 
step of verifying the record with a public key of a pubhc-private key pair. 

The method of claim 64, wherein the public-private key parr is for an entity. 

The method of claim 64, wherein the public-private key pair is for a user of a browser to 
which the record pertains. 

The method of claim 45, wherein each SessionID is retained within a respective record of 
the database together with a digital signature for such record, and further comprising the 
step of verifying the record with a public key of a pubhc-private key pair. 

The method of claim 67, wherein the pubUc-private key pair is for an entity. 

The method of claim 67, wherein the pubHc-private key pair is for a user of a browser to 
which the record pertains. 

The method of claim 47, wherein each EntitylD is retained within a respective record of 
the database together with a digital signature for such record, and further comprising the 
step of verifjdng the record with a public key of a pubHc-private key pair. 

The method of claim 70, wherein the public-private key pair is for the entity of the 
EntitylD. 

The method of claim 70,_wherein the pubhc-private key pair is for a user of a browser to 
which the record pertains. 

The method of claim 49, wherein each ApplicationSessionID is retained within a 
respective record of the database together with a digital signature for such record, and 
further comprising the step of verifying the record with a public key of a pubhc-private 
key pair. 

The method of claim 73, wherein the pubHc-private key pair is for an entity. 

The method of claim 73,wherein the pubhc-private key pair is for a user of a browser to 
which the record pertains. 
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The method of claim 49, wherein each UserlD is retained within a respective record of 
the database together with a digital signatiire for such record, and further comprising the 
step of verifying the record with a public key of a pubUc-private key pair. 

The method of claim 76, wherein the pubHc-private key pair is for an entity. 

The method of claim 76, wherein the public-private key pair is for the user of the UserlD. 

A method of viewing a page representative of past browser interactions of a particular 
browser with a server arrangement, comprising the steps of: 

(I) monitoring browser interactions of a pltirality of browsers, including the 
particular browser, with the server arrangement, including, 

(a) capturing information regarding primary and subordinate http requests 
received from the browsers at the server arrangement and corresponding 
primary and subordinate http responses sent to the browsers from the 
server arrangement, the information including, 

(i) for each request, 

(A) content of the request, 

(B) a time of receipt for the request, and 

(C) a browser identification (BrowserlD) associated with the 
request, the BrowserlD being unique to each browser, and 

(ii) content of the response corresponding to each such request, and 

(b) identifying sessions for each BrowserlD, each session comprising requests 
associated with such BrowserlD that are received at the server 
arrangement within a predetermined period of time and corresponding 
responses; 

(c) assigning a session identification (SessionID) for each identified session; 
and 

(d) recording in a database for each identified session the SessionID for such 
session in association with, 

(i) the content of each respective request in the identified session, 

(ii) the content of each respective response in the identified session, 

(iii) a chronological order of the requests in the identified session, and 

(iv) the BrowserlD for which the session is identified; 

(II) creating content of a response, including, 

(a) parsing the content of a primary response recorded in the database to 
identify uniform resource locators (URLs) contained therein, the primary 
response being associated with the BrowserlD of the particular browser; 
and 
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(b) for a URL so identified, locating in the content recorded in the database of 
subordinate requests received at the server arrangement prior to the next 
primary request a URL matching the identified URL, and upon a match, 
replacing the identified URL in the content of the primary response with 
a database pointer directed to the content recorded in the database for the 
subordinate response corresponding to such subordinate request having 
the matching URL; and 
(III) sending the created content of the response to a reviewing browser for generation 

of the page. 

The method of claim 79, further comprising originating a digital signature at the 
reviewing browser for the page viewed. 

The method of claim 80, wherein the digital signature is originated using a private key of 
a public-private key pair of a user of the reviewing browser. 

A method of rendering assistance by a customer service representative (CSR) to a user of 
a particular browser interacting with a web server arrangement, comprising the steps of, 
(I) monitoring browser iateractions of a pluraUty of browsers, including the 
particTilar browser, with the server arrangement, including, 

(a) capturing information regarding primary and subordinate http requests 
received from the browsers at the server arrangement and corresponding 
primary and subordinate http responses sent to the browsers from the 
server arrangement, the information including, 

(i) for each request, 

(A) content of the request, 

(B) a time of receipt for the request, and 

(C) a browser identification (BrowserlD) associated with the 
request, the BrowserlD being unique to each browser, and 

(ii) content of the response corresponding to each such request, and 

(b) identifying sessions for each BrowserlD, each session comprising requests 
associated with such BrowserlD that are received at the server 
arrangement within a predetermined period of time and corresponding 
responses; 

(c) assigning a session identification (SessionID) for each identified session; 
and 

(d) recording in a database for each identified session the SessionID for such 
session in association with, 

(i) the content of each respective request in the identified session. 
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(ii) the content of each respective response in the identified session, 
(ui) a chronological order of the requests in the identified session, and 
(iv) the BrowserlD for which the session is identified; 

(II) viewing by the CSR on a CSR browser a page representative of past browser 
interactions of the particular browser of the user with the server arrangement, 
comprising the steps of: 

(a) creating content of a response, including, 

(i) parsing the content of a primary response recorded in the 
database to identify uniform resource locators (URLs) contained 
therein, the primary response being associated with the 
BrowserlD of the particular browser; and 

(ii) for a URL so identified, locating in the content recorded in the 
database of subordinate requests received at the server 
arrangement prior to the next primary request a URL matching 
the identified URL, and upon a match, replacing the identified 
URL in the content of the primary response with a database 
pointer directed to the content recorded in the database for the 
subordinate response corresponding to such subordinate request 
having the matching URL; and 

(b) displaying the page on the CSR browser upon receipt by the CSR browser 
of a response having the created content; and 

(III) providing guidance by the CSR to the user based on the viewing of the page by 
the CSR. 

The method of claim 82, wherein the guidance is provided by the CSR in near real time. 
The method of claim 82, wherein the guidance is provided by the CSR offline. 
The method of claim 82, wherein the gmdance is provided by the CSR via telephone. 
The method of claim 82, wherein the guidance is provided by the CSR via email. 
The method of claim 82, wherein gmdance is provided by the CSR via Internet chat. 
The method of claims 79 or 82 , further comprising the steps of, 

(a) obtaining a user identification (UserlD) associated with a particular request, and 

(b) recording the UserlD in the database in association with the SessionID of the 
particular request. 
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The method of claim 88, wherein the UserlD is obtained from an apphcation server. 



90. The method of claims 79 or 82 , further comprising the steps of, 

(a) obtaining an application session identification (ApplicationSessionID) associated 
with a particular request, and 

(b) recording the AppHcationSessionID in the database in association with the 
SessionID of the particular request. 

91. The method of claim 90, wherein the ApplicationSessionID is obtained from an 
apphcation server. 

92. The method of claims 79 or 82 , further comprising, before said step of identifying 
sessions, first discarding, 

(a) responses, each of which has a content type matching a predetermined content 
type, and 

(b) each request corresponding to such response. 

93. The method of claims 79 or 82 , further comprising, for each request for a resource 
predetermined to have sensitive input fields, first deleting data from such input fields 
before said step of recording the content of the request. 

94. The method of claims 7 9 or 82 , wherein the database includes contents of previous 
responses recorded in association with respective hash values therefor, and further 
comprising the steps of, 

(a) calculating a hash value for the content of a current response; and 

(b) when the calculated hash value matches none of the recorded hash values, 
recording the content of the current response in the database and, in association 
therewith, recording the calculated hash value in the database. 

95. A computer network for performing said step of monitoring of claims 79 or 82 , 
comprising: 

(a) a server arrangement disposed for communication with a browser whereat said 
step of capturing is performed; 

(b) a database whereat said step of recording is performed; and 

(c) a firewall disposed between said server arrangement and said database. 

96. The computer network of claim 95, wherein said server arrangement comprises a single 
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97. 



The computer network of claim 95, wherein said server arrangement comprises a 
plurality of servers. 



98. The computer network of claim 97, wherein said step of capturing information is 
performed at each server of said plurality of servers. 

99. The computer network of claim 98, wherein said computer network further comprises a 
collection component. 

100. The computer network of claim 99, wherein the method further comprises the steps of, at 
each server of said plurahty of servers, 

(a) calctdating a hash value for a response captxired at that server; 

(b) when the calculated hash value matches one of the reference hash values, 
forwarding from that server to said collection component the calculated hash 
value but not the content of the response; and 

(c) when the calculated hash value matches none of the reference hash values, 
forwarding from that server to said collection component the calculated hash 
value for the content of the response and the content of the response. 

101. The computer network of claim 99, wherein said step of identifying sessions is performed 
at said collection component. 

102. The computer network of claim 99, further comprising a fLcewaU disposed between said 
server arrangement and said collection component. 

103. The method of claims 79 or 82, wherein the page further represents past browser 
interactions of the particular browser in a particular session, and the primary response 
for which the content is parsed is associated with the SessionID of the particular session. 

104. The method of claims 79-or 82 , wherein the web server arrangement services web sites of 
a plurality of entities and wherein the database further includes recorded therein, in 
association with each request, an entity identification (EntitylD) unique to each entity. 

105. The method of claim 104, wherein the page fiirther represents past browser interactions 
of the particular browser with regard to a particular entity, and the primary response for 
which the content is parsed is associated with the EntitylD of the particular entity. 

106. The method of claims 79 or 82 , wherein the database further includes recorded therein, in 
association with each request, an apphcation session identification 
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(ApplicationSessionID) for an application session, each ApplicationSessionID being 
unique to an application session. 



The method of claim 106, wherein the page further represents past browser interactions 
of the particular browser in a particular appUcation session, and the primary response for 
which the content is parsed is associated with the ApplicationSessionID of the particular 
appHcation session. 

The method of claims 79-W-83, wherein the database further includes recorded therein, in 
association with each request, a user identification (UserlD) for a user of the particular 
browser, each UserlD being unique to a user. 

The method of claim 108, wherein the page further represents past browser interactions 
of the particular browser by a particular user, and the primary response for which the 
content is parsed is associated with the UserlD of the particular user. 

The method of claims 79- or 82 , further comprising the step of modifying the content of the 
parsed primary response to deactivate hj^ertext that would otherwise be included in the 



111. The method of claim 110, further comprising the step of identifying a form sovirce URL in 
the content of the parsed primary response and a matching target sovirce URL in the 
content of a subsequent request recorded in the database, and associating the response 
content with the request content. 

112. The method of claims 79-e- r 83, further comprising the step of identifying a form source 
URL in the content of the parsed primary response and a matching target source URL in 
the content of a subsequent request recorded in the database, and modifying the content 
of the response to include data from the content of the request such that the page 
generated by the browser comprises a form-filled page. 

113. The method of claim 112, wherein the page comprises a complete form-filled page. 

114. The method of claims 79 or 82 , wherein the parsed primary response includes a content 
type of text/html. 
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A method for monitoring a browser's interactions with a server arrangement, comprising 
the steps of: 

(a) capturing information regarding primary and subordinate http requests received 
at the server arrangement and corresponding primary and subordinate http 
responses sent from the server arrangement, the information including, 

(i) for each request, content of the request, and 

(ii) content of the response corresponding to each such request; 

(b) recording in a database, 

(i) the content of each respective request, 

(ii) the content of each respective response, and 

(iii) a chronological order of the requests; 

(c) parsing the content of primary requests recorded in the database to identify 
uniform resource locators (URLs) contained therein; and 

(d) taking a predefined action in response to the recognition of a predetermined 
pattern of identified URLs contained with the content of the primary requests. 

A method for monitoring a browser's interactions with a server arrangement, comprising 
the steps of: 

(a) capturing information regarding primary and subordinate http requests received 
at the server arrangement and corresponding primary and subordinate http 
responses sent firom the server arrangement, the information including, 

(i) for each request, content of the request and a time of receipt for the 
request, and 

(ii) content of the response corresponding to each such request; and 

(b) identifying sessions, each comprising requests received at the server arrangement 
and corresponding responses; 

(c) assigning a session identification (SessionID) for each identified session; 

(d) recording in a database for each identified session the SessionID for such session 
in association with, 

(i) the content of each respective request in the identified session, 

(ii) the content of each respective response in the identified session, and 

(iii) a chronological order of the requests in the identified session; and 

(e) for a particular SessionID, parsing the content of primary requests recorded in 
the database in association with such SessionID to identify uniform resource 
locators (URLs) contained therein, and 

(f) taking a predefined action in response to the recognition of a predetermined 
pattern of identified URLs contained with the content of the primary requests. 
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A method for monitoring a browser's interactions with a server arrangement, comprising 
the steps of: 

(a) capturing information regarding primary and subordinate http requests received 
at the server arrangement and corresponding primary and subordinate http 
responses sent from the server arrangement, the information including, 

(i) for each request, 

(A) content of the request, 

(B) a time of receipt for the request, and 

(C) a browser identification (BrowserlD) associated with the request, 
and 

(ii) content of the response corresponding to each such request; 

(b) identifying sessions for each BrowserlD, each comprising requests associated 
with such BrowserlD that £ire received at the server arrangement within a 
predetermined period of time and corresponding responses; 

(c) assigning a session identification (SessionID) for each identified session; 

(d) recording in a database for each identified session the SessionID for such session 
in association with, 

(i) the content of each respective request in the identified session, 

(ii) the content of each respective response in the identified session, 

(iii) a chronological order of the requests in the identified session, and 

(iv) the BrowserlD for which the session is identified; 

(e) for a particular BrowserlD, parsing the content of primary requests recorded in 
the database in association with such BrowserlD to identify uniform resoiu-ce 
locators (URLs) contained therein; and 

(f) taking a predefined action in response to the recognition of a predetermined 
pattern of identified URLs contained with the content of the primary requests. 



118. The method of claim s llS . 116r- e r ll^, wherein the predefined pattern comprises a 
chronological sequence of URLs. 

30 

119. The method of claims 44^116 . or 117 , wherein the predetermined action comprises 
notifying a customer service representative of the recognition of the predetermined 
pattern. 

35 120. The method of claim&-4jr^ll6 . or 117 , wherein the predetermined action comprises 
assigning a pattern identification (PatternID) corresponding to the URL pattern 
recognized and recording the PatternID in the database. 

121. A computer network for performing the method of claim s 115, 116, or 117. comprising: 
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(a) a server arrangement disposed for communication with a browser whereat said 
step of captiiring is performed; and 

(b) a database whereat said step of recording is performed. 

122. The computer network of claim 121, further comprising a firewall in said computer 
network disposed between said server arrangement and said database. 

123. The computer network of claim 122, wherein said server arrangement comprises a single 



124. The computer network of claim 122, wherein said server arrangement comprises a 
pluraHty of servers. 

125. The computer network of claim 124, wherein said step of capturing information is 
performed at each server of said plurality of servers. 

126. The computer network of claim 125, wherein said computer network further comprises a 
collection component whereat said step of identifying sessions is performed. 



O 20 127. The computer network of claim 126, further comprising a firewall disposed between said 
server arrangement and said collection component. 

' 128. Computer-readable medium having computer-executable instructions that perform the 

steps of the method of claims 1 , 2, 3. 13, 11, 79, 115, 116, or 117 . 
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